Ransomware Bets on Cloud Backups and the Botnet That Will Not Die

News

Ransomware Groups Now Targeting Cloud Backups to Force Payment

Attackers have figured out that local backups are often mirrored to the cloud, so they are encrypting or deleting both to eliminate recovery options. If your backup strategy relies on a single cloud region without immutable snapshots, you are effectively betting your business on the attacker not finding it.

New Botnet Variant Weaponizes Consumer Routers and NVRs

A fresh botnet strain is chaining default credentials on cheap routers and network video recorders to build DDoS capacity fast. It is a good reminder that your network perimeter is only as strong as the forgotten IoT box under the desk.

Critical IBM AIX RCE Vulnerability Requires Immediate Patching

IBM disclosed a remote code execution flaw in AIX that could let attackers take over systems without authentication. If you are running AIX in production, patching this is non-negotiable because exploit code is likely already circulating.

Tools

New Nuclei Templates Land for Faster Vulnerability Scanning

The Projectdiscovery team dropped a batch of fresh nuclei templates covering recent CVEs, letting security teams automate detection without writing custom scripts. If you run a vulnerability management program, keeping your template library current is one of the highest-leverage things you can do.